OPNsense pros and cons

The IDS and IPS features are valuable. From the usability perspective, there is a lot of good documentation. As IT professionals, we found it very easy to configure the firewall. It was easy to configure and use.

The most valuable features in OPNsense are reporting and visibility.

The most valuable features are reporting, the Sensei plugin, and firewall capabilities.

The VPN server feature is the most valuable. It is integrated with Radius and AAA for doing accounting and authentication. Insight view is also an important feature for me at this time. It allows me to assess our network traffic. I also like the firewall feature. The BSD kernel has a packet filter. It is one of the most solid frameworks for firewalls. Its user interface is one of the best interfaces I have used.

OPNsense is easy to scale when running on the hardware.

The initial implementation process is simple.

We have found pretty much all the features of the solution to be valuable.

I have found the solution has some great features overall, such as guest access capabilities, dashboards, and ease of use. There is plenty of documentation and support and it has the plugins that I needed.

The system in general is quite flexible.

We did not like the fact that you have to configure everything with the graphic user interface. We have used other firewalls, such as FortiGate, that you can configure via code. OPNsense is not easy to integrate. When you are deploying via GitHub or another source repository, this is not possible. That's one thing we didn't like much.

There are issues with stability and reliability.

I would like to see better SD-WAN performance.

The only thing that I would like to see improved is the Insight or the NetFlow analysis part. It would be good to have the possibility to dig down on the Insight platform. Right now, we can easily do only a few analyses. If this page becomes more powerful, it surely will be a well-adopted platform.

The interface needs to be simplified. It is not user-friendly.

While they do have paid options that actually gives better features, for most of the clients, if they tend to take a paid option will instead opt for Fortinet.

The solution could be more secure.

The logging could improve in OPNsense.

The interface isn't so friendly user. But we have some technicians here who are quite confident with this tool. OPNSense could maybe add sets of rules so it's simpler to manage different groups with particular needs.